Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/6307B34A7CAD11EE9E7B9434C4F9AE02.roa
File:                     6307B34A7CAD11EE9E7B9434C4F9AE02.roa (raw, json)
Hash identifier:          /QiKgn5sBz0ONRYcM1JvQlCWVa4Jvc9ROw/bHMNmg2o=
Subject key identifier:   A7:DF:EB:96:5F:81:A4:58:AF:78:71:10:D6:8F:01:C6:7C:3A:14:A7
Certificate issuer:       /CN=A917B0F6/serialNumber=C0AEF7077F52622567179ACE56AD5EE8CD64604E
Certificate serial:       0136
Authority key identifier: C0:AE:F7:07:7F:52:62:25:67:17:9A:CE:56:AD:5E:E8:CD:64:60:4E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK73B39SYiVnF5rOVq1e6M1kYE4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/6307B34A7CAD11EE9E7B9434C4F9AE02.roa
Signing time:             Thu 19 Jun 2025 04:02:44 +0000
ROA not before:           Thu 19 Jun 2025 04:02:44 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     15830
IP address blocks:        2400:9460::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/wK73B39SYiVnF5rOVq1e6M1kYE4.crl
                          rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/wK73B39SYiVnF5rOVq1e6M1kYE4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK73B39SYiVnF5rOVq1e6M1kYE4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Jun 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 310 (0x136)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917B0F6, serialNumber=C0AEF7077F52622567179ACE56AD5EE8CD64604E
        Validity
            Not Before: Jun 19 04:02:44 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=68538be4-cb6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:7a:b1:03:1a:1a:e0:fa:89:46:6c:c0:f0:fc:
                    a7:40:66:23:b9:f9:1c:93:07:6b:a0:1e:2d:d3:34:
                    4b:14:d5:83:a2:e0:b2:d0:5c:9e:ba:fd:fe:33:f3:
                    fe:b9:d6:95:fc:b5:5f:a1:d1:cd:39:8a:5f:6c:90:
                    45:63:d6:6e:87:b5:3a:2d:2c:1f:70:10:8e:af:80:
                    8a:b3:d0:3c:d4:56:26:09:b7:92:b4:c3:bb:11:1e:
                    bc:0d:40:7e:cf:a4:c2:f6:15:aa:f2:2a:8d:48:b7:
                    95:ad:13:d2:76:75:7e:1b:63:18:3a:59:a8:0a:07:
                    3c:f1:9d:90:6f:9a:78:85:3c:c0:f0:a2:64:7f:83:
                    8e:7d:b6:3d:b5:9d:38:82:d6:6a:c5:95:a6:4d:3c:
                    fa:c6:af:10:dd:32:65:93:5d:69:fa:bf:63:78:ec:
                    78:50:78:ad:65:53:c7:2b:ea:c2:01:db:4f:cc:4a:
                    bd:d2:0d:e6:61:28:ac:fb:7d:37:60:32:d7:fd:8b:
                    b7:0b:ee:54:91:cf:7e:ba:29:3f:4b:92:42:a1:c2:
                    f7:c4:af:48:cb:41:23:81:6a:cd:55:4b:49:a3:50:
                    bf:19:77:5a:b3:d7:f0:10:3a:bf:49:3a:c3:da:89:
                    d0:3c:83:50:e1:29:d0:a2:f5:99:4b:90:70:57:20:
                    f5:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:DF:EB:96:5F:81:A4:58:AF:78:71:10:D6:8F:01:C6:7C:3A:14:A7
            X509v3 Authority Key Identifier:
                keyid:C0:AE:F7:07:7F:52:62:25:67:17:9A:CE:56:AD:5E:E8:CD:64:60:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/wK73B39SYiVnF5rOVq1e6M1kYE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK73B39SYiVnF5rOVq1e6M1kYE4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/6307B34A7CAD11EE9E7B9434C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:9460::/32

    Signature Algorithm: sha256WithRSAEncryption
         06:40:4a:f7:64:62:9f:06:dd:3b:4f:8c:40:2b:7a:18:44:2e:
         5a:f3:19:3d:67:a8:2c:7e:02:e4:0d:3d:4e:cf:0d:fa:61:54:
         55:10:0d:37:a6:bc:b1:1c:c5:8c:18:8f:08:62:90:8e:28:6c:
         33:60:b9:ed:64:2f:f3:8e:23:71:d2:65:f8:d2:9f:80:c9:f1:
         ee:4e:c6:23:6e:e6:4b:e3:15:ba:3d:f0:67:82:af:7f:ec:81:
         f9:5b:78:ec:dd:0a:d2:9f:6c:0a:bf:fa:fe:a4:68:8f:d7:eb:
         7a:1a:6d:12:c2:81:b2:3b:66:19:77:62:24:47:fe:36:37:27:
         17:15:6a:32:42:15:53:5e:90:08:1c:73:01:9d:29:2e:0e:fc:
         ee:49:ca:9c:f2:d4:cd:5f:16:2a:8d:b5:b4:e6:53:e0:48:7b:
         bb:c3:9a:4b:c5:d9:71:b7:c3:df:68:eb:77:f9:47:43:41:f1:
         42:58:73:90:9c:ff:68:e9:0f:cf:b7:8a:a0:cb:f9:f4:99:94:
         51:42:13:02:f0:3a:94:94:68:f3:81:96:3b:eb:f6:50:3c:aa:
         3b:75:c6:32:26:d3:b3:56:6e:74:e7:31:ca:b8:8f:c1:a9:da:
         45:18:68:e8:1f:38:6d:92:a5:ab:c9:05:0b:a1:45:b7:35:4c:
         2c:0c:d7:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 09:55:22 2025 by rpki-client